logo
Home News Solutions Pricing FAQ References Online Purchase Contact us
Direct link: How to recover deleted files in AIX. Download free tool.

Testimonial

It was definitely beyond my expectations of how well an undelete program would work!
Andy, UK

How to recovered deleted files from a JFS filesystem.

Limitation of recovery on JFS filesystems :

Following is a sample recovery

# ./v43fslist /dev/hd3
## Filesystem Utilities from Compunix. Version v6.1.0. AIX 4.3
##  Copy of v43fslist utility, list recoverable files (not possible to recover files).
##  For a recovery utility, contact 
##
# starting interactive mode for filesystem on /dev/hd3
## AIX V3 filesystem.
## Filesystem /tmp, Volume 
## 40960 4k blocks.
# Reading inode table.done.
Class I license needed for recovery.
Starting interactive mode.
================================================================================
Search for Oracle DBF files (y/n) ? n  not interested in Oracle files
================================================================================
Starting interactive scanning.
Using build-in file-typing.
Results will be saved to /var/compunix/l_dev_hd3.
# Scanning   40960 inodes.
#   40960 inodes (100.00%) scanned, Found 18 interesting files 20 MBytes 18 files recoverable by inode
# Scanning 40960 blocks.
#   40960 blocks (100%) scanned. 28 interesting blocks, 53 MBytes28 files recoverable through indirect blocks
Total save status file is 35456 bytes.
Analyse status saved in /var/compunix/l_dev_hd3 location of status file
================================================================================
Class I license needed for recovery.  class needed for ordering a license 
Current JFS filesystem : /dev/hd3
  20 inodes recoverable (by partial name or number) in directory /.INODES.
  Top filetypes in /.INODES filetypes that can be recovered in the .INODES directory
    #3 : data 0200-0000-00
    #3 : data 5056-4d41-50
    #2 : data 0800-0000-00
    #1 : data 0008-0007-01
    #1 : data 01d9-01d8-00
    #1 : data 01e9-01e7-01
    #1 : data 02d9-02d7-00
    #1 : data 02e1-02e0-00
    #1 : data 0b0e-f00d-00
    #1 : data 2e2f-4d4e-54
  28 interesting single blocks in directory /.SBLOCK.
  Top filetypes in /.SBLOCK
    #5 : message catalog
    #2 : data 0200-0000-00
    #1 : data 0000-a000-00
    #1 : data 0008-0007-01
    #1 : data 0800-0000-00
    #1 : data 0b0e-f00d-00
    #1 : data 1000-00f5-00
    #1 : data 2020-2020-20
    #1 : data 2034-2032-30
    #1 : data 2054-3a30-20
   9 inodes recoverable by full path (use 'ls' for more information).9 files recoverable by full pathname
================================================================================
Current directory /
> ls   show what files can be recovered in the root directory
Current directory /
rwxrwxrwx     11264 Mar 15 17:50 [.]/9 (directory)
r-xr-xr-x                           .INODES/20  sub-directory with 20 files that can be recovered 
rw-------       640 Mar 15 17:50 mauopMa       (data 3030-3432-6332-3361-3564-6330-3734-6161 '0042c23a5dc074aa')
r--------   4194304 Nov 18 21:16 s1169406-1172816-1177311      (data 0008-0007-0107-a300-0016-0031-4d4c-3030)
r--------   4194304 Nov 18 21:16 s1219481-1158-2374    (data 0800-0000-0000-0049-0000-801c-2054-462d)
r--------   4194304 Nov 18 21:16 s788478-1560640-1561663       (message catalog)
r--------   4194304 Nov 18 21:16 s790525-1562752-1563775       (data 0b0e-f00d-0004-0000-0000-0001-0000-2000)
r--------   4194304 Nov 18 21:16 s929790-1352768-1356927       (data 0200-0000-0000-02e9-0000-801b-4c2d-5430)
rw-rw----     60704 Mar 15 17:42 sh4286.4598   (data 5056-4d41-503a-2009-3030-3432-6332-3361 'PVMAP: ')
rw-rw----     60704 Mar 15 17:42 size.check14528       (data 5056-4d41-503a-2009-3030-3432-6332-3361 'PVMAP: ')
rw-rw----     60704 Mar 15 17:42 xlcW1Ywmpqb   (data 5056-4d41-503a-2009-3030-3432-6332-3361 'PVMAP: ')  first printable characters in file
r-xr-xr-x                           .SBLOCK/28 sub-directory containing data that can be recovered from indirect blocks
Total bytes regular files   21154272

9 recoverable files shown in the root-directory of the filesystem.
For each file, file type is shown, in case of data, also first printable characters are shown.

Current directory /
> cd .INODES  change to sub-directory .INODES
Current directory /.INODES
> ls

The .INODES directory contain all recoverable inodes. For the inodes for which
no filename can be reconstructed, an unique number is assigned.

Current directory /.INODES
r-xr-xr-x                           ./20
rwxrwxrwx     11264 Mar 15 17:50 [..]/9        (directory)
rw-r--r--        12 May 03 18:16 180   (data 2e2f-4d4e-542f-6c69-6e75-780a-0000-0000 './MNT/linux')
rw-r--r--        17 Oct 24 12:58 235   (first bytes all zeroes)
rw-r--r--         8 Oct 24 13:04 236   (data 6275-7469-6f6e-7300-6184-0000-0006-0204 'butions')
rw-r--r--        30 Oct 24 12:58 237   (data 02d9-02d7-0000-0000-01f4-0030-0000-0000)
rw-r--r--        14 Oct 24 12:58 238   (data 02e1-02e0-0000-0000-0040-0031-4f50-4552)
rw-r--r--         8 Oct 24 13:04 239   (data 01d9-01d8-0000-0000-0040-0031-4155-544f)
rw-r--r--        25 Oct 24 13:04 240   (data 01e9-01e7-010e-2700-0016-0031-4d4c-3030)
rw-r--r--      4626 Oct 24 12:58 241   (data 0200-0000-0000-00e9-0000-803a-2020-2020)
rw-r--r--        10 Oct 24 13:04 242   (data 0200-0000-0000-00e1-0000-801c-3820-4649)
rw-r--r--         8 Oct 24 13:04 243   (data 0800-0000-0000-000b-0000-8027-2020-2020)
rw-r--r--         8 Oct 24 13:04 244   (data ffff-0000-0000-0000-0000-0000-0000-0000)
rw-------       640 Mar 15 17:50 mauopMa       (data 3030-3432-6332-3361-3564-6330-3734-6161 '0042c23a5dc074aa')
r--------   4194304 Nov 18 21:16 s1169406-1172816-1177311      (data 0008-0007-0107-a300-0016-0031-4d4c-3030)
r--------   4194304 Nov 18 21:16 s1219481-1158-2374    (data 0800-0000-0000-0049-0000-801c-2054-462d)
r--------   4194304 Nov 18 21:16 s788478-1560640-1561663       (message catalog)
r--------   4194304 Nov 18 21:16 s790525-1562752-1563775       (data 0b0e-f00d-0004-0000-0000-0001-0000-2000)
r--------   4194304 Nov 18 21:16 s929790-1352768-1356927       (data 0200-0000-0000-02e9-0000-801b-4c2d-5430)
rw-rw----     60704 Mar 15 17:42 sh4286.4598   (data 5056-4d41-503a-2009-3030-3432-6332-3361 'PVMAP: ')
rw-rw----     60704 Mar 15 17:42 size.check14528       (data 5056-4d41-503a-2009-3030-3432-6332-3361 'PVMAP: ')
rw-rw----     60704 Mar 15 17:42 xlcW1Ywmpqb   (data 5056-4d41-503a-2009-3030-3432-6332-3361 'PVMAP: ')
Total bytes regular files   21159038
Current directory /.INODES
> cd .SBLOCK
Current directory /.SBLOCK

In case your data is not in the .INODES directory, check out the
.SBLOCK directory for files. Indicate filesize are rounded to the nearest 4096.

> ls
Current directory /.SBLOCK
      53248                s0   (data 3435-2063-6f6d-7075-6e69-3320-6e61-6d65 '45 compuni3 name')
     294912                s1   (data 2054-3a30-204c-3a33-3238-2020-0a4d-6179 ' T:0 L:328  ')
      45056                s2   (data 6e69-3320-6e61-6d65-645b-3734-3936-5d3a 'ni3 named[7496]:')
     102400                s3   (data 2074-6f20-3231-332e-3232-342e-3833-2e31 ' to 213.224.83.1')
      36864                s4   (data 5056-4d41-503a-2009-3030-3432-6332-3361 'PVMAP: ')
    4194304                s5   (data 3331-3030-3130-3030-3030-3830-3030-3037 '3100100000800007')
    4194304                s6   (data 6c20-493a-656e-3120-463a-6e20-543a-3020 'l I:en1 F:n T:0 ')
    4194304                s7   (data 2e32-3535-2050-3a75-6470-2053-503a-3638 '.255 P:udp SP:68')
    4194304                s8   (data 0200-0000-0000-00a1-1000-0032-2020-2020)
    4194304                s9   (data 1000-00f5-0000-001d-0000-0009-0000-036c)
    1105920                s10  (message catalog)
    4194304                s11  (data 0b0e-f00d-0004-0000-0000-0001-0000-2000)
    4194304                s12  (data 0200-0000-0000-02e9-0000-801b-4c2d-5430)
    4194304                s13  (data 0008-0007-0107-a300-0016-0031-4d4c-3030)
    4194304                s14  (data 0800-0000-0000-0049-0000-801c-2054-462d)
     524288                s15  (data 6c0a-2e2f-7573-722f-6f70-742f-7065-726c 'l')
    4194304                s16  (data 4261-636b-696e-6720-7570-2074-6f20-2f64 'Backing up to /d')
    1769472                s17  (data 2020-2020-2020-3131-3533-3134-202e-2f75 '      115314 ./u')
     204800                s18  (data 3a30-2e30-2e30-2e30-2044-3a32-3535-2e32 ':0.0.0.0 D:255.2')
       8192                s19  (message catalog)
       8192                s20  (message catalog)
       8192                s21  (message catalog)
      20480                s22  (message catalog)
    4194304                s23  (data 3934-2e31-3137-2e31-3032-2053-3a38-342e '94.117.102 S:84.')
     737280                s24  (data 0000-a000-0000-5355-0000-0800-0000-0007)
     737280                s25  (data 7420-6c69-6e75-780a-4170-7220-3330-2031 't linux')
    4190208                s26  (data 2034-2032-303a-3237-3a32-3020-636f-6d70 ' 4 20:27:20 comp')
     536576                s27  (data 4321-8765-0000-0000-0000-0800-0000-00e0 'C!')
Total bytes regular files   56520704

In case this would be a fully licensed version of the software
you can copy with the cp command your data back to a real filesystem.

Current directory /.SBLOCK
> cp s27 /recover-my-file
Current directory /.SBLOCK
> quit


Here to download page for free list tool..
Usage sample of list utility on a JFS2 filesystem
In case you have problems downloading this software or you have troubles executing the software, please contact us.